LdrProcessRelocationBlock
StealthCloseFile
StealthGetSize
StealthOpenFile
StealthReadFile
Behavioral task
behavioral1
Sample
ae48ffa19f469d80ad25970b1dcb6806f239be45d81b27a487eb8315dd46646f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ae48ffa19f469d80ad25970b1dcb6806f239be45d81b27a487eb8315dd46646f.exe
Resource
win10v2004-20241007-en
Target
ae48ffa19f469d80ad25970b1dcb6806f239be45d81b27a487eb8315dd46646f
Size
6.7MB
MD5
1d4e6958943d1432903b184afaefd5e4
SHA1
2e666e9a4824b68acb8a9d5c329e34afec63da10
SHA256
ae48ffa19f469d80ad25970b1dcb6806f239be45d81b27a487eb8315dd46646f
SHA512
6a95325c31561d97b872acfc6c60e25299678c90b5ed188483938d001056147c3e1b0c7094c0b85b20dfa50c4c58bab0094f397c1a720542f90ed3fdf30ad06c
SSDEEP
196608:b3AHmWm0WyKc2b3W1nyD+5paIFCsbUSZ6TDqi:DG/2yMq8u78s/Z6x
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
ae48ffa19f469d80ad25970b1dcb6806f239be45d81b27a487eb8315dd46646f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LdrProcessRelocationBlock
StealthCloseFile
StealthGetSize
StealthOpenFile
StealthReadFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ